rails rails vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20221
3. 202410
4. 20251
5. 20261

Newest CVEs

• CVE-2026-66066

  Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

  rails · rails

  Critical9.5
• CVE-2025-55193

  Active Record logging vulnerable to ANSI escape injection

  rails · rails

  Low2.7
• CVE-2024-54133

  Possible Content Security Policy bypass in Action Dispatch

  rails · rails

  Low2.3
• CVE-2024-47889

  Action Mailer has possible ReDoS vulnerability in block_format

  rails · rails

  Medium6.6
• CVE-2024-47888

  Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

  rails · rails

  Medium6.6
• CVE-2024-47887

  Action Controller has possible ReDoS vulnerability in HTTP Token authentication

  rails · rails

  Medium6.6
• CVE-2024-41128

  Action Dispatch has possible ReDoS vulnerability in query parameter filtering

  rails · rails

  Medium6.6
• CVE-2024-32464

  ActionText ContentAttachment can Contain Unsanitized HTML

  rails · rails

  Medium6.1
• CVE-2024-28103

  Action Pack is missing security headers on non-HTML responses

  rails · rails

  Medium5.4
• CVE-2024-26144

  Possible Sensitive Session Information Leak in Active Storage

  rails · rails

  Medium5.3